Reportico Administration Page - Detect

ID: reportico-admin-panel

Severity: info

Author: geeknik

Tags: panel,reportico,login,detect

Description

Create a simple report using the designer front end in seconds from a single SQL statement. Add expressions, user criteria, charts, groups, aggregations, page headers, page footers, hyperlinks and even custom plugin code.

YAML Source

id: reportico-admin-panel

info:
  name: Reportico Administration Page - Detect
  author: geeknik
  severity: info
  description: |
    Create a simple report using the designer front end in seconds from a single SQL statement. Add expressions, user criteria, charts, groups, aggregations, page headers, page footers, hyperlinks and even custom plugin code.
  reference:
    - https://www.reportico.org/site2/index.php
    - https://github.com/reportico-web/reportico
  classification:
    cpe: cpe:2.3:a:reportico:reportico:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 2
    vendor: reportico
    product: reportico
    shodan-query:
      - title:"Reportico Administration Page"
      - http.title:"reportico administration page"
    fofa-query: title="reportico administration page"
    google-query: intitle:"reportico administration page"
  tags: panel,reportico,login,detect

http:
  - method: GET
    path:
      - "{{BaseURL}}/run.php?project=admin&execute_mode=ADMIN&clear_session=1"
      - "{{BaseURL}}/reportico/run.php?project=admin&execute_mode=ADMIN&clear_session=1"

    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: word
        words:
          - "Reportico Administration"
          - "reportico_"
        condition: and

      - type: status
        status:
          - 200
# digest: 4a0a00473045022100d42ad31563bb2f20d5d674e94ce4bb6b3699d0c1aa572113219dd64ac1c98ba102207a55870645334b45d975282c6b88802e0a59b3f4c75b64e76d7e0537c38ef05f:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/exposed-panels/reportico-admin-panel.yaml"

View on Github